When attempting to view it in Facebook now, we can see the following error in the console.
Refused to display 'curotrak.com/' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.
You'll have to narrow down what's setting that value in the header - the website, your server, any security extensions (in Joomla or your server), etc.
Googling the error shows that other people have had the issue with Canvas apps for Facebook (regardless of using JFBConnect or not -
salesforce.stackexchange.com/questions/1...ponse-header-of-exte